Mastercard Pilot Verifies Secure Agent Transactions For Fintech Developers

A recent pilot transaction involving Mastercard, AI company Flybits, and credit card issuer Rogers Bank confirmed the operational viability of secure agentic commerce in Canada. The test used Agent Pay, Mastercard’s service designed for automated transactions executed by AI agents, moving past simple recommendations to actual purchases.

For Canadian startups developing payment technology or AI tools, this pilot offers an early look at necessary infrastructure. The challenge extends past simple authorization; even authorized agents are vulnerable to attacks like “prompt injection,” where malicious actors attempt to redirect the agent's instructions. Furthermore, merchants introducing their own agents require robust systems to distinguish legitimate activity from fraud.

Mastercard’s Agent Pay Trust Framework addresses these threats by integrating signals related to identity, customer behavioral patterns, and overall fraud risk. The goal is to convert complex data into timely, actionable intelligence that helps banks and merchants differentiate authentic agent behavior from potential malicious activity, while minimizing friction for the end user.

Scaling agentic commerce across Canada requires cooperation among financial institutions, retailers, government bodies, and payment networks. As Parikh noted, safeguards must evolve alongside AI capabilities to ensure agents act with clear permission and accountability.